Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9CF76FEF66611EF9C5FB29E762E951A.roa
File: E9CF76FEF66611EF9C5FB29E762E951A.roa (raw, json)
Hash identifier: pBFyaqOMEJDClM6M0CO5d6csaA8mREMonY4UGB5Z9vQ=
Subject key identifier: 11:9E:90:14:93:0E:27:0E:E3:78:C4:0C:F7:D6:F8:D3:5E:03:F5:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D3A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9CF76FEF66611EF9C5FB29E762E951A.roa
Signing time: Sat 01 Mar 2025 06:32:14 +0000
ROA not before: Sat 01 Mar 2025 06:32:10 +0000
ROA not after: Sun 20 Feb 2028 06:32:10 +0000
asID: 17561
IP address blocks: 154.84.166.0/24 maxlen: 24
154.84.174.0/24 maxlen: 24
154.84.175.0/24 maxlen: 24
154.85.99.0/24 maxlen: 24
154.86.3.0/24 maxlen: 24
154.86.12.0/24 maxlen: 24
154.86.13.0/24 maxlen: 24
154.86.64.0/24 maxlen: 24
154.86.65.0/24 maxlen: 24
154.86.66.0/24 maxlen: 24
154.86.67.0/24 maxlen: 24
154.86.68.0/24 maxlen: 24
154.86.69.0/24 maxlen: 24
154.86.70.0/24 maxlen: 24
154.86.71.0/24 maxlen: 24
154.86.72.0/24 maxlen: 24
154.88.43.0/24 maxlen: 24
154.88.49.0/24 maxlen: 24
154.88.60.0/24 maxlen: 24
154.90.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93498 (0x16d3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 06:32:10 2025 GMT
Not After : Feb 20 06:32:10 2028 GMT
Subject: CN=67c2a9ee-5aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c7:c8:82:ae:9f:95:55:c3:09:c6:ea:32:4c:
17:f5:a8:35:92:8d:70:c0:ae:dc:9c:82:1f:a1:68:
8f:23:f1:7e:ce:53:46:d4:4c:cb:1c:dd:e9:21:ae:
48:cd:e2:2c:4c:9a:f0:e4:ec:0c:41:f4:aa:99:01:
42:f0:fa:5c:d6:ec:49:ce:6d:bb:f2:21:0f:f5:71:
8f:f6:ba:12:a2:5d:68:66:b9:b2:6c:53:18:c2:3e:
31:34:a3:a9:a0:84:ac:72:d9:c0:4c:85:61:ba:02:
8e:ac:84:12:47:4e:c5:8e:49:f0:4b:b2:ad:d1:92:
ff:13:b4:d0:fb:7c:3b:d9:e4:6c:e8:46:db:c4:fa:
63:ca:81:e6:b7:13:0e:f3:d3:38:eb:de:36:72:1c:
cc:95:29:7f:5a:f6:ee:dc:68:4f:1b:df:4d:7f:66:
85:e0:c7:a9:aa:94:ca:0c:c2:bc:27:9a:cb:77:cb:
fd:a3:15:92:7b:47:b3:83:3e:b4:49:be:15:61:f8:
3d:5f:bf:89:c9:6b:24:11:06:af:da:35:1b:ef:36:
9c:bc:61:5a:42:7c:aa:e3:a4:19:6c:20:37:36:1f:
1c:a3:d2:03:0a:47:77:b3:e0:b4:54:61:5f:5f:ca:
74:7a:af:8e:95:64:ab:f9:36:98:f3:e2:55:3e:09:
fe:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9E:90:14:93:0E:27:0E:E3:78:C4:0C:F7:D6:F8:D3:5E:03:F5:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9CF76FEF66611EF9C5FB29E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.166.0/24
154.84.174.0/23
154.85.99.0/24
154.86.3.0/24
154.86.12.0/23
154.86.64.0-154.86.72.255
154.88.43.0/24
154.88.49.0/24
154.88.60.0/24
154.90.1.0/24
Signature Algorithm: sha256WithRSAEncryption
68:25:b5:4d:af:26:9e:b7:e0:aa:79:46:84:07:e9:68:1e:d9:
4b:7f:4f:69:7c:15:41:97:c0:a6:ab:19:ba:a2:a7:32:90:ac:
e8:03:64:f7:84:92:f1:bd:85:48:02:f4:42:4a:dc:0e:f1:a1:
0b:fa:f0:ef:03:e9:a1:3b:11:d6:66:52:95:a0:f5:5e:a1:ba:
06:31:d9:fa:7a:ee:11:ab:4e:4c:18:2c:b2:02:fa:2a:77:d0:
fd:c9:1c:c5:b9:bc:52:91:e6:c9:9b:2b:97:3b:46:9d:f6:82:
bb:6e:cd:9f:25:10:80:fe:8c:a4:74:4c:c4:97:1c:a9:0d:53:
c5:b7:c0:97:b5:d9:ce:d9:24:8b:cf:f5:50:e6:be:82:69:fe:
30:8f:b6:bb:a4:0b:88:91:c4:51:f4:00:2e:25:1b:05:fd:23:
19:ff:99:de:98:33:85:fd:e6:a3:a3:09:46:d9:93:06:26:98:
55:8b:10:0e:01:c3:ba:a4:68:40:6e:af:86:5e:80:75:7e:7c:
3f:26:dd:63:ea:1a:96:00:2e:33:23:5e:e6:80:ac:b3:58:94:
39:b8:24:fe:ee:ff:92:58:db:9a:60:d7:a4:57:b7:87:21:20:
dd:6f:8b:bd:c3:02:9b:c0:c3:84:f5:19:2b:2a:35:db:12:cf:
69:b6:f0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:57 2025 by rpki-client